10/550216 

1 XO5f?ecW0F/PTO 22 SEP 2005' 

93 • 

[oooi] ro3SWfi, dS^B^^-^^h^fflt^igc^tb^ -<>?-^yhlz.mm£3n 

fist 

[0002] ^ 515, -TV*— *5*4Sf©.*yH7— ^^LTPf-^iHf &ftte?tzlsb<Dffifabl,X , 
4^—^yh<D^^itB.^Xh^>lETF (Internet Engineering Task Force) (^«t«9^ 

d^PS&LfclPSec (Security Architecture for Internet Protocol) # 5 RFC (Request for C 
omments)240l(J^T##I^^l<tf¥^)(-^$KTV^ o ^(D^L<D^^m\m^Y 
ri /'K75^,^&iL-T, SSL (Secure Sockets Laye^-^TLS (Transport Layer Security)^ 

aO^H^fl:r^=fyXA % HSl/illT^Xi, &ttf7*Pr-=;l^tf>SA(Secur 
ity Association)^ *R£r£"Stl/C*3< 0 r^SAff &<D&M\±^ if^^Pr-^/l^&S 
IKE (Internet Key ExchangeV^VKv^— ? (Handshake^Ph^VW-W&LT^T 

t?tt5o 

[0003] ipsednfmi, !&miz.i&zxffi3immz.mm&*iZo \psecmmi*t<Dmi^ 

Sec^^-T-5 VPN (Virtual Private Network) lZ$3tfZ>s<try r-Bf^M-ftaS^gl- 
H^£tl<£> 0 o^tJflHj^tf^^— ^yh^LAN (Local Area Network) £rg8R-f 3^ 
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te^CD^fybZU^ikl^ m^tltl^yb^, ^(D^yy^i-lPTb'U7,{zm 
[0004] r<OJ;5^^^yhBf ^afta^e^LTtt, Tftx&famZlntc&im. 

#^Ftfc!JP^|fi2003-304227^# (£AT#WFXilRlOT*) ^£*bTV ^5 (WT, 
|!2^3l5t£fl¥tP^) 0 

m^fz^/—h'(^mW:) l06k<DmX\ ^*—*~ybl02k*-^yhy— C 
tttg^ii^TV^V^ iot*- -M^.yM7— ^104^^yhl^^Jlft3l^M<tL 

22i^^y-Ki06iHt^biiif^T9/cfe(D^-^Bt-^-fk^^ko^S^, ^ 

m^—^i20^WMP^y—vi22[z.{\^xrY0o 

[0005] Kl06^Bf ^-iijf cD®Sb^tT3^(-^35/-Kl06li, -T^— ^-yh 

102, iv^~— h^i^ios, A^-yhy— ^i04^^urBt-8-iijf m$^<tr 

ybZ, V<Dm^^l22\Z.m&{S2l) 0 '(DSg^mmm^^vhPKD 

7*— pi*. ^loetmm^y— ¥xh^m^^\22t^^-m\t^mtL-r 
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[0006] BgF-^iifS JMS'^yl^Sfll Ufc04flS/— Kl06li, 3f ££nfcB£^-3Ilf ttfri*— 

^r^fpy— Kl06{C^f-r6(S24) 0 :JiWot^/- K106I*, ^grt 
fb^tifc^— ^^yh^Srtif — ^<120{d^f (S25) 0 3rJ&^WfKf£o 
o rttdioT, ^Srt/— Ki 22(^u>'v ? ) fi % Si$«€-fb, ^^-fbco^co 

[0007] IPSec»£*8rf**£tfe/nh=A'£^fT"*-3»-W\ SAff $g&:§:^^{;:-&;ti-5pW 
"CfT?C<t fl50lj £ p # ftH^ ^ 2003 - 1 79592^-^ T , #f^^2^ 
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[0008] z.<D£otm^mx^^^v-vv^x~ftk>*kz>^tft 0 ^mmtmm'Mmo 

03-289299^fR (WT, mfX^t^S) {C^thXl ^ Q 
[0009] ^2-t^5fe»f-C(i, Bt^f^^-yh(D^^/N°^^hBt^SRS^tt^fc/c?,^ 

g(±Bt^-iiif {c-rs^^^ci^iprhv^^^^tf^^Ki-S^M^ 1 ?, 

, eAfcr^-/^120(^US^-iijff-ttT^*t^cO7?cI^S:ftTBf ^it^yV^ 
m^Xmi : B # H#f^ffij?I4^ 2003- 304227 



5 

WffXffi2: 0 ^S#K : ttlJH^M2003-179592^4» 
#^^3: S #ffl#f^ffifl^ll 2003- 289299 
##I^^CiS^l : RFC (Request for Comments) 2401 

[0011] rcD^B^iciS^^^hBt-i-^^a^Mfi. 4>-?—*yhk%5^mW:t(Dm^m 

mitt mm mmmzn. ^^mmx\i§:m^titcy<^yb^M^x, m^-mmm 

[0012] ^-btft^LfcJ;^ ~(Dmfl<D^yhVi J %-&mmm^tl&, ^yYV-^% 

mutcDffl^mmztix^^frib. mx.\^>^-^yh^mm^tL^mw:x^ 



r 
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[0013] mi)^<DWM^x^y^yhm^^m^mmm<Dmi^MM(o^^Mnf^m^ 
[E)2] m 2A{±n] i <ip (DBt-^-ii m i 2 Ksai&**i-t v aw n<vm& 

CI2l4j;L03PJ^fg 1 £3^*^ 

i-^o- y ^|2] 0 

[|ll6]!fi2||;M^J;3<1«^g^ 

[lll7]^2^M^J(^J:^^^^^fbfc^^yh{^i-SPf^ffijf^tffg^S: 

[0014] uT.^mm^mmm^^^x, m^zmMLxmmi-z> 0 

mimmm 

m 1 « , r 1 tf>n (c^/^^hBt -^-Maf-t^^i o^-g-tp^xT- 
<5v ^xmm^mtu mwmti.x^it^mRum^it^m^mti-^ 

%±mmmi*mmzftxi< ^Am&m&m ^mmmn n&nmm) &nmzinx 
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ftV^OfcifaSifttfEL-tVVBo r^HiS0«J(C*3V^rJi, *H&3£lt3tt, IPSecHfg/^ 

[0015] ^^hf^&sfts^gioii, *yhy-?2%ft\^xmm£titct'mmmkm 
^^mmmnm^ipsec{zmmvtch(Dx^^M(Dmm^9c^^mm3k 

[0016] SStf#te'lt^i2{i, ^^{i^fflgtt^fe'lt^f^ticto-c^^^ixao 

BS ^-ififf &W#R (WT, TSA (Security Association) tff fg j £l ^) IZ^mtXffi 

l-CftJtStbfc'fc©-?*)?)* ^J^«*IH2A(^-r < J;5l-^ &&S^fc©iB*3£lt0>iP 

TFV^lcattELT (1) SAtf «*«J3iJ-TSit«)032lf yKDSH»flS[-Ct iJ9 ^XhthX 
&s<fryh t PiZ.ffiA£ft, ^ybfHoymitfH^^'f-^m^-SPl (Security Param 
eter Index) , (2) jg-ff x — ^±t±£{fcfIELTi|gj£U ^fc-tOtfeJESrfi 1 ?fzib(D7° 
p hn;i/X*fe5AH (Authentication Header) Rt^f^—^SMSLTlsitU £fc 
^<7>^|gfi?|^i-'5fcfe^)7 B aK=i/W-t 5 $)5ESP (Encapsulating Security Payload)<£> 
f^tL^^^nh^/wtffg^i-ir^^y^^nh^/Wf^, (3) H^fc^lStEW 
K^nffiffi^ixSBt^-T/i-^yXA^'Bt^tffgs (4) Sit b/t^yh^IP^-;/^ 

He— K^faJxa*©^— K^SE-t - *— Kit (5) tS^IPTKVX&.I>**°— h 



8 

[0017] ZOmMMX'fc*— Kit &&h?>Xtf— h"£— FkSir&ifi. 0>J;tfcfIPSec$lti& 

[0018] SAtf $g<D#^7^— IKE (Internet Key Exchange) ^C0|i^^y' 0 nh37K > i 
8Wtrfasl3ii, Bff*a«l^aiE1ft^l2(J:|B«$nfcSA«IRt^*ix5llt^ 

[0019] Sid, roHiS^j-efi/^wit^^SftS^eioji, mutjtmmft. iUff 3fe 

■CJRIWf-t-5«*^JWffflJl6SH»x.TV^. 
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bailiff &&3&&J1-5fc^^^ 

[0021] H2Bt»©lffBW7-<^W*itt, IPSec»1iB&WLTfcV^*KW<^^3Wtt 
-Cfeip, IPTK^^^IPv4(dJ;o-C^^-C*5 1 9, i3Ht 5c<DIPTKW?.;6 5 10.0.0.1/32( 

nhn/VCfc-Stcp (Transmission Control Protocol) CD^-^f-ii, iUfa 7C^°— Mi^S. 

[0022] 2*t S ^7>f/V^fff £6ii#fiBf -^Jl mULtcZfub^MPSec&Wmtt 
1-ZffiifcmS:5lZft't&7j/l'*{%m<DWX3bV), i*m^IPrHV^^10.0.0.2/32, 
i||ff^IPTKU^^n0.0.1.*/24<^Bt^MS^H^^^K^O*^^B5(^^ 

1^*^2001 ::1, ilHf 3fe(OIPTK^^2001::2, :/p|*=vHfJ Hte J H^<E>BE 
User datagram protocol) t?*><3 , iUft tcO^?— r-#-§-^f ^cO^°-h#^-<t^l37 
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[0023] £fc, 4t? S 07^if IRii, i£lf 7ctf>IPTFV*J&S2001::l/128, i£ff$fc<DIPT 
Kl^^^2001::2/128, 7°nh=2Mfffg/jSlP^^fWl±^z2>hn— /b-f -St/ci r-^vUTr£> 
<5icmp (Internet Control Message Protocol), J&.Xf-^ x&im7Z ( D'tf — r-fjr"^"^ 1Z5<D$M 

&iaz, temm^mm ^mm ±o rant sftfc h*jggai-r-5o 

G-'^yhlZ* Mx.\tm2C{Z.7jk-t3:?^, mit 7t(SRC)IPTHV;^, SHS 5fc(DST) 

0 ^T(D— y^tt$g^HDcD^(Cx— ^^DA/jvf^D$HTV^o fe?S— y^SPI+lCV 
/W^ti/Cl^^/N-J:^ 7=— ^^DA^iPSec(^^t!!!lLfc:0f-8-^S$ttrv^5 

[0024] ^{t¥ijrai6te^{fLfc^:yh*^^ 
4^*LXh^\ 

s^yhVg-^&MiXM^WilOia^ ARP (Address Resolution Protocol, TKl^fl? 
^^C2r.=i/U)^=NDP (Neighbor Discovery Protocol , Ma^b^^^t^^ 
$Rl|X*7 0 nh=i^^, UPnP (Universal Plug and Play)&^<7>l£SSI^#&^0^ 

^VTIPTKV*, 7°Dh37KDSSiJ^^(Dtf fg^tfH]2B{-^i-j:5 
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[0025] w&&m5&ft£tvfcMk'&t£&. ^^7-j*mm^wfo^tz.m^, m^-mm & 

^V^S^^g^V-CfT^tLSo (Integrity Chec 

k Value, ICV) fi, ISIIT7l^=fyXA^J:oT^:^tLST^'yXA{c:J;oT»tti$ 

[0026] w.^<Dmmmxi^ y<y-yh^wmixmmmo^ ^mmm^m-WMi 

2^fa'|t$i^7 , cSAtffB^-g<5V^-r, ttt^mmSlZ^X&im £tWc^-.yr-&IPSec 

^■itir^^^nmir^m^itmmmi9t^m^tixi^ 0 
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[00283 7^^mm&^mi-z^4knwm9£mrt%^t{c£^x. s^n^tim 
^^(t^)^tix^^^iE^m^BW3t(Dmx^^-mitm7^^t^m 

<*^k?AX$Z) 0 

[0029] m3ii^<^yh^^mitmm^io^^^mus^b(D^^^yH^M't 

itm^^^ipr}<-u^MJtvx^^mmm^mmMi2^m^Ayx^ 

>yy*SUzm i 9. JkOs^yh^iti-Zo 

[0030] ^7 i y7 B S4-e^^h^^t:-r2>^#iJW^Hfc*^{-{i > ^yVV—Wsf?^ 
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[0031] ^-y^S5^\ *yhy—v-4>*7^4*9lc^xm5£fofc;<^-yb£i®^mW:5 

^(D^i^M4^y^^i4^LxmiBi-^tm^itmm^6^x^xmwr^ 

{m^mzWMl2^m£i2±AsX*^y-y-°Slllzm<9, 7yZ<Dy<^yht:^im i~6 0 
[0032] ^^7°S12«m^^-yh^iiif l^tf #^-a-S^^*LTV^^{i\ Bf^-{b 

h^^tir^^mm^H(^y^si4),m^it^^^tmm^^t, ts 

fcm^(-(±, ^O^f $^c^^h^Bt^^iJir^i9(cJ;oTJ^*$tL5 (7fy 
^°S18) 0 



* 
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[0033] XTvZfSllV'^yh&m^iktttnWiZfrlzm&MZ. ^^^7^ ^14 

\z£oX&iSZti1Z'<lryhAK Bff-*iffifflKW«E*«Bl2^IB«$ixyi:SAW«(i: 

S<J#Bff^ti»18»Cj:oTIPSecJJ:i|S*LTB&^k$n(^^S16)»*©l«* 
^k^tL^^yhiS^yh^— 9&9-7zc4*&RXM^9— *yh2£4M/tffi#§SB 
3 (d^-fs L (X^^S 17), Xx<x7°S 1 1 {d Ho T&C7> *$r y h*Siti"So 

[0034] ^yM*J»MG2ltt^Wi6fi3*»&^^ 

irnt-^-iim E&tim^E^T v \ ^S^tLfeBf^-iiff 8&W*ft (SAW ffi) &Bfr 

rv^^Jiii^KW^EIfBiit-«tWSIJ^B3W^ii«KW#^ESrtT 

v \ ^s$tbfcnaf^-iift*&w# (saw«) Srut*ii(sisw«sa«aji2^##5&tp 

[0035] EI6te, fg#^g3;^OSff ^^M-^6'^/hB£ ^Sftg^BlOKJ; 



15 

XoXmmZfrhZ) (*^-yy*S2-3) 0 
[0036] *^yy*S2-3X\ $t{B'*ryhtim*mte&ft&&ME&lzMttt><Dtt^kW 

tm-x^^mmm^w^sAmm-m^^mmmnm^mMi2{zmm^ 
£§'it$s^s^ 1 1 ^x^xm^mw:st^mm^mn(o^M^n% 

[0037] ;*^X/S3-l-T\ tB^§3t-^#$tLfcSA|f X7^:/S3-2-?flf -5§-ii(f SS 

mn^mmmm^22^x^x^^y^y^^i4^vx^mm5^mim^ 

[0038] ^^^S3-3^*^^^pf ^^ ; S|^^.(i^-c^V^i4 ^ lJ^L/cm^tt> 

^y^S2-4-e^r^J^SAtt$g^f£-|g^^-cv ^^IJ||fr^tL?.i, ^^^/7°S3-3(c: 



I 
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[0039] HI7{4, ^*^M5^^cOS^^yh(-^a^^hBt^-^S^a^SlO(-j; 

^yysilXi&MmW5ti^<^ybtf§:m£)rb%k. 7.^yz/S12-lX^it^^y 
hc^mTcIPTKW^^/i^tfffg^ 

23^x<on^. tm^xt^^km^^tcm^^it^yb/j^<^hnwfm2 
m^mi-^h<D^f)^<^yhmmM23^x^xmm^ti^(^^y^si2-3) 0 

[0040] ^:y:/S12-3TVN 0 ^yh;5SiIffO||§££^ 

^^-yh^iiff (D^^*^^t>^^fc5<t*IJ^^^(C{-J: x X^y^S12 

tbT V Itti tf^x -y^S 1 3 - 1 -CS Atf ft flSflF ^-ii if l&tjf SR^fc gfl 1 1 { r i o T t@ ^ 

[0041] ^-y7°S13-l-Cti^B3i^m^tL7itf $Rf±, *7^S13-2-?flf -^iHt Kff 
fgf5'tt^l2(cf5'|t$tb, ^^S13-3T?, 7^vWtf «IEltaJ15{c:|51S$ix-CV^ 
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[0042] ^y^su-z^^mm^^mmm^m^x^^tm^tcm^ii, -to* 



[0043] WJb-ClftWLfc. ^l^ifeMS.^2HmM(-<t5^^^hBt^S^MeiO 
mMM<DWt£rlt, /^-yh4 £ iJ»2l ) 23^_blS-7 0 n^A^^tr-r^>t°^-^(^ 

[0044] B&^iiftB&ffiF «fattfflS12&t^7^u^fff #fB«^15(D9*> / >^<i:t>-^ 

(ff^n/c) ^^IJffl^ldi^^S^^V^^^, IC#— K\ USB(Universal Sena 
1 Bus) ^— , SD (Secure Digital) ^V%—b*t£t*<D, ffi#^s<ik(DhZ>&Wi.*lfflj:7 f 
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[0045] -h^j;?^ ^<Dmw(D;<^yh^^mttmmmoizy—hv^izmrtbti. 

[0046] rcO^P^c7)^^hBt^^S^a^giUT{±7^/^tf^^S^<^a^^^ 

• - 

LT^^S(^IPTHV^#^Di-tL{4*J;<, 0iWS"ftS!£S^IPTKl^£;B^ 

[0047] IPSecmt^WP^tg^-^tb-C^^n^o ^oTt^ClfcV ^X\^~V^7^(D 
IP^(-IPSec^^S|a^iA^tL, £>3V ^{4^^m<75IP^Bg^-IPSec^ttg^a^. 

iAmrv ^c 0 L^^CD^PJ^^^il^/^hBt-^^S^aigglO-^^IP^ 
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fc"9, IPTF]sX(DQi\i^tf&irZ)>&m&te<. *fcBf ^a-f-ttf-y— ^cDIPTKV 
[0048] r<^J;^^^O^0^£75^0iJ^^^hBt^a^S^SlO^(DIPSec^tMmP 

[oo49] mm^mixn2^{z.f&mx^-f£o{zLAN4{z2ii-°— m'-im^mm^d 
h^(DmmM^mm^-^t^x^^ 0 



20 



[oo5i] m^mst^mLtz.y<^h^MLx<o^z<om^mmLxiiX<. mztitjz 

[0053] fj:^^-mmm>tm^mmmmmmM(D^mntc^yh^^m^Mm 
^m^mm^x^t^^-^^M^^t^ti^tz^{^mxh^ 0 asanas 
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[0054] ±^y<^yH^M^-^ ^S^IPSec^WTOLTfTofc^, f&cD^*&SSL(S 
ecure Sockets Layer) ^TLS (Transport Layer Security) fti'dcfc^Hf -Pj-^LS^fro 
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[2] if ^mtmcos<^yhm^mixmmmz. z^mrn ftm^mn, mm 

o 

* 

[5] m#mitzm<Ds<^yhm^-&mttmmmz.to\,^x, mz^mtsgmmm^ 
[7] ■ m^i7bm5<D\,^fafrmm<Ds<^yh^mmRmmm-z, mt^>?-^y 

[8] »5(tIl2^^5(OV^-rn^^B«!c(7?/^yhBf fMniiili^ ^bKHtuffiBg ^ 
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[9] m^^ium(D^vY^%mtmxmmm-z. zh\^ 



[11] . f»#^10f£«<O'^yNl£^&&tt3^ 

[12] ft3^^iiia^^^hBt^a^s^g«$b(-, H&saiffi*^B^tfe*pu-c, 

[13] (a) >T>^— ^yh»^a$n^ffi¥§fi«i»*^«©W©''^hifif9^*5tt*^ 
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(a-2) ^M^tc^mmmmn^mm^mm^^-r^Jint, 

■ (a-3) ^S^^^^^VVibtimeS^tL^^-yh^^^^^XJl^^-aX 
[16] »*^15«E<fc^^yhBff^^jSfe^*3V>-C,lWiaxS(a-l)t4, 

(a-i-i) miESflr^^M-^H-snt-s-aflrKW m<D&n&&&-?$>ht£. n&se 

(a- 1-2) Bt^il^f!^^f^^f & |t^tLTV^5^b}4*^O0f^iijf{^tf^4 , ^t* 
[17] ff*iI16tS«c(^/^-yhHf ^a^fifefciSV^-C, BGfBXg(a-l-l) ttiiulE^^ 
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^^#«^7-f/u^W«|B«W(c:|aift$n-CV>5d»«rWWrb, iEtttetrch^ tufa 
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